Skip to content

Login Concept

Basically, there are 2 login concepts that can be used individually or in combination:

  • Local authentication
  • External authentication

Local Authentication

With local authentication, the name and password are stored in OpenOlat (locally).

External Authentication

With external authentication, the password is NOT stored in OpenOlat, but set and stored in an external tool. OpenOlat asks the external tool if this login name is authorized for access (LDAP, oAuth, Shibboleth).

2-Factor Authentication

The combination of local and external authentication requires both a password stored in OpenOlat and a query from OpenOlat to an external tool.

  • Is the locally stored password okay?
  • Does the external tool confirm that the logged in name is authorized to access?

If both factors are met, access is granted.

Passkey

Passkey is an alternative to passwords. Instead of a password being entered by a person, a key stored in the device is used. (Device-based instead of person-based authentication.)

More details can be found in a separate section here in the manual.